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(54) Abstract Title 

Software licence management system uses clustered licence servers 

(57) Software licence management system which provides flexibility in the number of licence servers that 
participate in a cluster. The licence management system permits the concurrent use of n copies of a software 
program over a network (e.g. a LAN) comprising a plurality of client workstations 103, each having a copy of a 
software program installed thereon and requiring an authorisation from one of a plurality S of licence servers 
101 each time the software program is used. For high availability, the licence servers 101 employ redundancy, 
each containing a licence database 401. For security, the licence management system requires that at least the 
integer majority, M, of the plurality of licence servers is active at any time (e.g. two out of the three servers 
shown); otherwise, all the servers stop serving licences. The number of licence servers can be changed, but 
subject to the following limit: where s1 and s2 are respectively the minimum and maximum number of servers 
in the cluster. M(sl) ♦ M(s2) > s2. with s1 < =S and s2 > =S. 
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LICENSE MANAGEMENT SYSTEM 

The present invention relates to license management systems and 
particularly to a method and system for providing flexibility to a license 
5 management system. 

The licensing of computer software was traditionally accomplished by 
providing a copy of the software and a license for each computer which was 
authorized to use the software. The software could be generally used only 

10 on that computer, unless it was deleted from that computer and transferred 

to another one together with the license. With the advent of wide spread 
computer networks a more efficient solution was required. A license 
management system allows a user to install a copy of a software program on 
N nodes of a network, but acquire only a limited number n licenses, where 

15 at an V time, only the maximum number n copies of that program can be 

simultaneously run on the network. When all the available licenses are 
allocated, additional users requesting the use of that software must wait 
for a license to become available. This kind of license management system 
has a number of advantages for both the software vendor and the user, 

20 because it allows the user to purchase all and only the licenses really 

needed and, on the other hand, allows the vendor to fight software piracy. 

An example of a state of the art license management system available 
on the market, is the License Use Management product of International 
2 5 Business Machines Corporation. 

In a typical network of interconnected computers with a license 
management system, as illustrated in Fig. 1, one or more of the nodes 101 
act as license servers, while a plurality of nodes 103 act as clients of the 

30 license servers. The service provided by a license server 101 to its client 

103 is that of granting or denying permission to run a given software 
program, according to the availability of a license record in the license 
server data base, and to the terms and conditions encoded in the license 
record itself. The license server usually creates and stores license 

35 records in the license data base upon processing license certificate files, 

which are provided by the software vendor and complement the software 
program to which they are related. This license. data base must be locked 
in some way to the specific instance of the license server (hardware + 
software) to prevent malicious users from copying the license data base to 

40 another license server machine and multiplying by two the number of licenses 

for all the software products contained in the license data base. License 
certificate files may contain some encryption or checksum information that 
allow the license server to verify their authenticity and integrity. 



45 


The fact that a license management system is monitoring the use of a 
given software program should be as transparent as possible to the users of 
that software program whereas it should be evident and beneficial to the 


for that and other software programs. Thxs 
administrator of licenses for J* on Ucense management system 

consideration places a strong ^ ideal Ucense management 

ta terms of reliability "^^sof tware program failures because 
syst em should be one ^ £or the soft ware programs that xt 

. of its outage nor becomes a bottlen 

monitors . 

nt svstem -availability is a measure of the 
In a license management s V steW ' inC oming requests (either 

degr ee to which the system can ^^^^ tiroe limits set by the 
granting or denying P-^"*?^^ syste ms attempt to provide a 
ser ved environment. Hxgh window by minimising 

continuous service -^hx» . l«t««l« P failure s occur. Usually 

causes of failure and components, so that the 

thi . requires a large degree o ig from failure of any 

continued operation of the entire system ^ gingle points 

single component. The f 3 ^. accomplish ed by having redundant 

of failure in the system Thxs can technology' that can 

components or systems, and -aval ^ M corop0 nents when a 
automate the transfer of -«^«" feature c f license management 

failure occurs. Availability xs a cruc ^ g Ucense 

systems, since an outage of one or more ^ critical 

management system can ?"™\^™ . license . An obvious solution 
applications, due to a failure to acquxr ^ clustering 

r ensure good availability ^ £ .. ld< a cluste r is a set of 

technics . In the ™^J^ «" network A cluster 

independent processors nodesK conn services fco end 

constitutes a sort of "black box which p ^ ^ tQ Rnow 

userS . .ike any ideal black box s ys m. the - ^ ^ 

whi ch node in the duster they are c f the 

duster ing techniques, axmed at xncrea g straightforward way 

, ys tem through server redundancy "^J*™ ^ naCu re of the license 
/ 0 ucense management systems ^ ^ ^ cake QVer the 

serving environment. A redundant xcen .. ser ^ ^ ^ ensure 

amount of licenses, served by Q \ Ucenses concurrently serve* 

r;rd\rr~: f tailzie „. - ^ 

authorization record. 

h1 em based on a method called "majority" or 
Solutions to thxs problem based ^ are 

quorum", are known, xn which a ^ q£ thoge servers 

configured to work cooperatively. M IB ,u licenses are 

i9 up and running and "^""^ of active license servers becomes 
available, whereas as soon as the ^ ^ Ucenses . A U 

less than the majority, all of the nulnber D f license servers 

existing solutions do not allow lexxbx y »^ ^ ^ fixed fcy 
that participate in the cluster. Th t by ^ user whGn 

licensing system vendor or can 
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or decrease trie 

application environment. 

•^h for example, by binding the 
In theory flexibility could - P^d ^ ^J^^, bin ary 
license authorization Key to a =° ftwa * e license SGrve r's data base 

dentil that can he securely '^^^ spe cific license server 
instead of binding them (the Ucense binary identifier can 

Ta aware-based identifier. The same^ .of«« ^ However 

be shared by all license serve « P~ txcx P ^ on the way Ucense 

license management system. 

alleviate the above 
« obiect of the present invention to allevx 
It is an ooject 

vid . ln . 

worKstation re^irin, an «^ie«.. ^ ^ reguiring th * t at 

using the software program the 1 « ^ 

least the integer majorrty of the pi system CO mprrsmg. 

Cluster is active at any in «- number of license 

- means for allowing an increa 
0 , lifvo£ license servers 

- limiting «- «~ », -J-i» " « 

„ lth r „P.ct to tt. initial -« ° "* th . int . 3 . r „,onitv o f th. 

cli.nt -orkst.tion h»W » "PY »' " OI s liens. •«««' ~ eh 
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4 

- limiting the number of the plurality of llc « nSe J^^i^ number 
to the initial number S so ^'J^^^^L number s 2 of server, 

installed thereon, and an inxtxa p ^ each 

concurrent use of a max xmum number of J ^ ^ of the lice nse 

clien t workstation requiring an author ^ 
servers before using the sof tware ^ » ^ of license 

requiring that at least ^Jj^ pro duct comprising: 

decrease in the number of license the numbe r of the 

- computer readable program code means f g g£> that 

piurality of license servers with ^rs plus the integer 

the integer majority of ^^J^J^ stric tly greater than the 
majority of the maximum number s2 of 
roax imum number s2 of servers. 

, the invention will now be described in detail 

Fig . , - , ~ - ot * uc * nse 

management system; 

e„bodi».»t ol the PT...M invM.on, 

* tvnical network (e.g. a Local 
As mentioned above, Fig. 1 represent - ^pxcal ^ 
m Ketwork, using a Ucense ^ system^^ ^ ^ 
present invention. Servers 101 ma ' • Corp oration. Client 

43P-140 produced by ^.rn.txo^lJ«xn.-. ^ available on the 

nodes 103 could be any ^ produced by Xnternational Business 

market, e.g. IBM Personal Computer 
Machines Corporation. 

.and Fig 3 the method of a license management 
With reference to Fig. 2 and g of funcCioning of 

, v , t .„ a-ca. -;;rrC n : - «- — — ■ - 

a server according to a preterre 
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■ v^t- to step 203 where the 

m.o^ion ..out « -°'7" o ^ „ V « «^V. TM. 1— i- * 
...il.bl. lien... «« M " . u , u . ny protected egein.t 

counterfeiting. "hen • regoe.t i» «c«i j( ^ ^ th . 

„„„ cnec*. wn.tne* 1« u "™ ■ ' - 

— - a * r;';." a— , * - «- — °< 

instance record (211) ana client (221) authorising the 

Ucenses. The server then sends a no .ore licenses are 

client to use the software product be that the soft ware 

available the reply sent to the clxen (221) ^ ^ ^ 

P-uct cannot ---^"^^ri^aiS) after having used the 

„ record ™ D ' ? ^ent wishing to use a 

^jn^s^rese^ed. When an 

<303) a license rec.es, ~ ^ = product ,niK 

is granted by the server then the clien avai iable and control 

otherwise it is checked whether process. When the client 

either goes back to step 30S or -™- a tes the pr ^ ^ ^ 

finishes using the software application * ™^ m) , 

which granted the license to release the license 

• i . »™reciate that a number of different 

method implementing similar license 
instead of the one described above. 

Fig . 4 S « » — o £ Hc.n.e *~££T£ZTJZ 
, preferred e^din-ent of «*. ^"'Td. ^ . , 

..rv.r 101. The infor-etion confined rn thr, d.t. bee. 

- the cluster ID; cluster; 
. the total number of servers ™<™™*^^. se rver that 

- the secure ID (possibly hardware -based) of each 
has ever participated to the cluster; 

35 the software products managed by the system; 

. the number of available licenses for each product. 

scribed » e^r - ^ ^ ^ in the art wil 

c^e that tCe L information could be organised in a number of 
"t .I : according to well known programing technics. 

Th e network represented in Pig. Sa has 
number n of licenses -r software P^ - ^pluralit^ ^ 
Each server 101 has a data base rue 
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• - „f view it does not make any 
described above. ~-«-. el ^ t rC^».-««=- -VserverXO! 
difference whether a license » / cUent 103 . with such a system 

of th e Ouster can prov.de a 1 cen ^ ^ & because the , h r 

the failure of one of the ser e Qne o£ the servers could be 

tW o can do the service for all ^ ^\ n _ of failure of one of the 
inactive and act just as a backup serv . g that the majo rity 

oth er two. The ^ it -; i ; n ;; s t : twl oveTt'ee) must be always active 
of the servers (in this case t gervices . with out this strict 

other-wise the system cannot be grant ed, because a malicious 

imitation the security of the sy clugter and make 

userc .ia d e taCh a S e r ver f - t ~ tiu ^ g ^ . three se rver 
be lieve to both dusters tb.t*v non -active. In this way the 

cluster with, respectively one and t prote ction mechanism 

number of the possible licenses would he ^doub ^ ^ ^ 

is the -majority- requirement, well known 

, f svstem represented in Fig. 5a may be the 

A no n limiting example o ^ ^ 5Q clients: 

following: a cluster of three ser ^ ^ ^ ^ cwo ge 

t he majority of the servers i two ^ ^ Ucenses each 

m ust be always active. Each of the - ^ q ^ nQn 

responds to the requests of £ ^ ^ ^ ^ ^ c takes 
ac tive. If one of the two active ^ gervice can continue 

OV er the licenses managed by that se ^ regpected . Those skilled in 

with out interruption and the • -1°"^ different implementations can be 

realised instead of tne 
requirements of the network. 

* * license management system 
As mentioned above, a ^^^^ ^th* server cluster, in 
is the fiexibility of ^ ^ ^Z: e de5Cvibe , in Fig- Sa the number 
cage circumstances change I th ^ p . g _ ^ ln this new 
of servers could be easily incre.se ^ ^ ^ updated to 

configuration the data ^J^.^. that there are five servers 

ref lect the new situation. Each s ^ &lways be 

rr. - — - - — ■ 

described with reference to Fig. 5a lic enses available with 

grantee the respect of the maximu number of ^ _ ^ ^ ^ 

consequent damage for the software vendo wh ^ ^ ^ 

concurrent licenses. X -^"^^^^ user could make a backup copy 

act as illustrated in Fig. 5c. The ma ^ gervers . 

of the data base 401 of Fig- 5a «**"J** fco £ive to arr ive in the 

Tnen the number of servers are 1 point the roa licious 

configuration of Fig. 5b. already conttnU nicating with each 
US er splits the LAN 501 in two smaller ones 


I 


10 


15 


20 


C D and E; and a 

other -. one sub-LAN 505 includ '^-J^,^ and B. The sub-LAN 505 

second sub-LAN 503 including the other t w «n requirement is respected; 

wo uld continue its service £™ Ltive for see reason but. 

each server believes that two server are ^ can b 

si nce the majority of -rvers ^s ^ m> .„ the sub -LAN 505 . 

continued regularly by serving the n av ^ number 

The sub-LAN 503 would be -terrupted bee malicio us user restores 

of three active server is not the data bases in sub-LAN 503 

the licensing environment, by * ^ was in the original 

with the backup copies he made when the ^ ^ ^ b erroneQUsly 

configuration of Kig- 5a. - ^^Xee servers with two of the, (the 
oelieve they are in a cluster of thr ^ ^ ^ In 

^rrr^ - — of available licenses 

causing a loss to the software vendor. 

* „f the present invention this 

wording to a preferred a t lowing flexibility, by 

unwanted security exposure is avoided while s ^ ^ ^ ^ 
^posing a limitation in the number of 
by the original configuration. 

„f licence servers, si and s2 

„ „ «*. S .. th. \Z .« — . — - 

rw .ctiv.ly «. th. »<> 1 wwlM , th. .» .f th. 

»» to «h. .i—. th« Mjcrlty „ ,2 h. 

— rrs r-s - - - b * tul£U1 * 

M(sl)+M(s2) > s2; 

with sl<=S and s2>=S and 

where M(x) is the integer ma3ority of 

« a »-icf ied by limiting 

to 1 the number of servers that can be 

the rule is satisfied if either 
I£ the initial number S is even are re moved from the 

maximum 2 servers are added to ^^^^^ this means that the 
cluster. These two conditions are mutual y ^ ^ 

sys tem administrator can chose " * by one or two. Once the 

by one or two. or to ^crease the rnitia ^ ^ t 

choice is done the initial ^ removed fr om such a cluster, 

respectively- As an example, one > a ^se ^ ^ in the 

the initial number S becomes the maximum p ^ ^ ^ M . 

clus ter and the only possible changes are^to^ ^ ^ ^ ^ ^ ^ 

re moval of the initially added server. 
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j j initial number S of servers 
EXAMPLE 1: odd micxax 

,„ t „. .... - - — « ~isr^n r,rr< 

s ot i» th. ^ U » t """ cl 3 u5t t; "pectin «>. «-!• ■>— » " 


-> 2+3 > 4. 

H(2)+M(4) > 4; 


powibl. •=««•» «ti.fyiM •=»• ««' s1 " 6 ' 


15 n _> 4+5 > 8 

M(6)+M(8) > 8 

M^8) + M(10) > 10 -> 5+6 > 10 - 


Ucence ^vex has been added to in the clust er and can neve, 

stored in the license data base of each . dentifier is deleted; thl. 

be deleted, unless the whole cluster -a x ^ ^ The 

. to ensure that license serve s cannot be P ^ ^ ^ ^ above 

Ucense servers can only be padded wxt «n ^ q£ ^ e 

rule and then deactivated to reduce tQ work . 

lose majority is to be up and « ,n order ^ ^ ^ _ ^ 
Once the limit specified above has been r ^ ^ ^ M 

to the cluster, but previously or gubstitut ion would breaR the 

removal of license servers from the clust ^ ^ jD q£ the 

security of the cluster xtself J^*^ mu3t be specified at cluster 
Xxcense servers that initially form th cU (de _ activated ) 
creation time. When a -^^j^ server is ju st marKed as no lon 9 er 
this information is not onC e the maximum number of servers xs 

ac tive in the cluster- ^^J^ ever be part of the cluster xs 
reached the whole set of 
definitely determined. 

.ccordin, to a preferred embodiment ^J^^J^ 
of the cluster, a minimum ^^^^Xojina to the cluster the 
This minimum set is composed ^\iZ um possible number of servers si; 
fir8 t time the cluster reaches the m-x _ P any longer . Further 

thereafter, these core servers cannot be de on ^ 

changes in the cluster conf xguratxon can be ^ 

previously de-activated server e^Jhu.. de _ activate d (i.e. removed 

of S servers B. C D and ^ Serve ^ ^ ^ ^ and 

from the cluster) . A, t>. 
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•» „i ou.lv de-activated server E and new server 
and F without touching the core set A. B, 
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• •„„ „ plurality of client workstations having a 
x . in a network compnsxnga comprising an initial 

soft- program installed J^J^J^, syste m for allowing the 
pl urality of S license server .._ * ^ ^ so£tware pro gram. each 

concurrent use of a maximum number o ^ ^ ^ Ucense 

client workstation license management system 

serve , s for us ing h -7-; e / majority of the plura lity of license 
ZTZIVZ cluster is active at any time, the license management system 
COroPrUi mls for allowing an increase or decrease in the number of license 

servers; plurality of license servers 

- tor lifting the m-»r of th. ^plur. W ^ ^ 

„«. « UU*1 « J L int.g.r -J-W o« the 

maximum number s2 ot serve* 

«t eorvers in the cluster, 
maximum number s2 of servers 

concurrent copies of software program. 

f laim 1 or 2 further comprising: 

5 • rjzz :r:i °— . »• «- — 

^ of the IDs the system can allocate being s2; 

th *. „..„. « locking th. o rr - ..oh .. ThV ^ ^ ^ _ r 
- means for storing on each license 
license server. 

3° OMnt S vstem of claim 3 further comprising: 

, The. license management system 

- = = ;=-r.=o- .o 

number of IDs that can be allocated has been reached. 
35 „,„, svs tem of claim 4 further comprising: 


cluster, 
the cluster. 

«. -»«— * -»* »— »7 ::* r:;; . - «»~ 

» network, comprising a f 
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to the inUlal number S so that the integer ^Uv 

sl of servers plus the integer majority of the maximum number s2 

is strictly greater than the maximum number s2 of servers. 

7 The method of claim 6 further comprising the steps of: 

' locating to each server a unique ID. the maximum number of the XOs 

the system can allocate being s2; 

- locking the unique ID on each server; 

- storing on each license server the ID of every other license 

8 The method of claim 7 further comprising the steps of: 

tracking license servers which are removed; 

- ^Tu, tb. .aai.ion <* — — «• — th * "" 1 " u * " 

ID* that can b. allocated has ba.n rsachsd. 

„. „ _ p«» ~ r;.::;r„r:r a 
crru"^" « «~ - ~ ™ ^ 

comprising: allowing an increase or 

- computer readable program code means for allowing 

pl urality of license server, with respect t the initia number^ 

the integer majority of the minimum number si of ser P ^ 

majority of the maximum number s2 of servers is strictly gr 

maximum number s2 of servers. 

n The computer program product of claim 10 further comprising: " 

computer readable program co d e means for XT 
a unique ID, the maximum number of the IDs ^ ^^te » on 

- computer readable program code means for locking the uniq 

each server; 
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- computer readable program code means for storing on each license 
server the ID of every other license server. 

Z: =rz = " r — :~ ,r 

reached . 

~™rf,.r-t- of claim 12 further comprising: 
b.l=n,in, to th. cXu.t.r. -h.n.v.r «». » 

the core servers from the cluster. 
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